Privacy policy

We list only the data we actually collect and the places it actually goes.

What we collect

Account: login, email address and the password stored as a cryptographic hash that cannot be reversed. Order: first and last name or company name, address, and a tax identification number for companies. Environment: its name, chosen options and deadlines. We do not collect phone numbers, dates of birth or any sensitive data.

Why

We process account and environment data to perform the contract: without your email address you cannot confirm the account and will not receive a warning that your time is running out. We process buyer details because tax law requires it. The data controller is Grzegorz Kaszuba.

Who else sees it

The infrastructure runs on Amazon Web Services and mail goes out through Amazon SES — both from the same provider. Payments are handled by a payment provider, who receives the amount and the order identifier. We pass the data to nobody else and we do not sell it.

Where it is processed

In the Frankfurt region, that is, within the European Union. The data is not transferred outside the European Economic Area.

How long we keep it

Environment data disappears on the deletion deadline shown on your account. We keep the account until you delete it. Unconfirmed accounts are deleted automatically. Order data we keep as long as tax law requires — five years from the end of the year in which the tax became payable.

Your rights

You have the right to access your data, correct it, delete it, restrict its processing and transfer it. You also have the right to complain to the Polish data protection authority. Deleting your account at your request does not remove order data we are required to keep for the tax office.

Contact about your data

Send data protection requests to kontakt@taklab.eu. You can delete your account yourself after signing in: Account, then Delete account. You can also ask for account deletion at kontakt@taklab.eu. Send the request from the address registered to that account — otherwise we have no way to check who is asking.